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CLAIMS 

What is Claimed is : 

1 . A system for controlling access to digital services comprising: 

(a) a control center configured to coordinate and provide digital services; 

(b) an uplink center configured to receive the digital services fi*om the control center 
and transmit the digital services to a satellite; 

(c) the satellite configured to: 

(i) receive the digital services from the uplink center; 

(ii) process the digital services; and 

(m) transmit the digital services to a subscriber receiver station; 

(d) the subscriber receiver station configured to: 

(i) receive the digital services from the satellite; 

(ii) control access to the digital services flirough an integrated 
receiver/decoder (IRD); 

(e) a conditional access module (CAM) communicatively coupled to the BRD, 
wherein the CAM comprises: 

(0 a protected nonvolatile memory component, v^herein: 

( 1 ) the protected nonvolatile memory component is used to contain 
state information to provide desired fimctionality and enforce one or more 
security policies for accessing the digital services; and 

(2) the protected nonvolatile memory component and a 
microprocessor's nonvolatile memory component share a programming charge 
pump and programming control; and 

(if) a fixed state custom logic block configured to control access to the 
nonvolatile memory component. 

2. The system of claim 1 wherein the custom logic block has a fixed algorithm that 
cannot be altered by external means. 
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3 . The system of claim 1 wherein access to a block of the protected nonvolatile 
memory component is limited to one or more functions defined in the custom logic block. 

4. The system of claim 1 wherein tiie custom logic block is implemented in solid 
state hardware that implements a simple and well defined state machine. 

5 . The system of claim 1 wherein the protected nonvolatile memory component is 
not accessible through a system input/output module, system bus, microprocessor, or extemal 
environment 

6. The system of claim 1 wherein the nonvolatile memory component is exclusively 
controlled through the custom logic block and does not require the use of a system bus or 
microprocessor. 

7. The system of claim 1 wherein a microprocessor's nonvolatile memory 
component and the protected nonvolatile memory componoit use the same physical and logical 
address ranges. 

8. A method for limiting unauthorized access to digital services comprising: 

(a) configuring a protected nonvolatile memory component, wherein: 

(i) the protected nonvolatile memory component is used to contain state 
information to provide desired fimctionality and enforce one or more security policies for 
accessing the digital services; and 

(n) the protected nonvolatile memory component and a microprocessor's 
nonvolatile memory component share a prograrnrtiing charge pump and programming 
control; and 

(b) controlling access to the nonvolatile memory component through a fixed state 
custom logic block . 
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1 9. Hie method of claim 8 wherein the custom logic block has a fixed algorithm that 

2 cannot be altered by extemal means. 

1 10. The method of claim 8 wherein access to a block of the protected nonvolatile 

2 memory component is limited to one or more fijnclions defined in tiie custom logic block. 

1 1 L Ihe method of claim 8 \\lierein the custom logic block is implemented in solid 

2 state hardware that implements a simple and well defined state machine. 

1 12. The method of claim 8 wherein the protected nonvolatile memory component is 

2 not accessible through a system input/output module, system bus, microprocessor, or extemal 

3 environment 

1 13. The method of claim 8 wherein the nonvolatile memory component is exclusively 

2 controlled through the custom logic block and does not require the use of a system bus or 

3 microprocessor. 

1 14. The method of claim 8 wherein a microprocessor' s nonvolatile memory 

2 component and the protected nonvolatile memory component use the same physical and logical 

3 address ranges. 

1 1 5 . A conditional access module (CAM), comprising: 

2 (a) a protected nonvolatile memory component, wherein: 

3 (i) the protected nonvolatile memoiy component is used to contain state 

4 information to provide desired functionality and enforce one or more security policies for 

5 accessing digital services; and 

6 (ii) the protected nonvolatile memory component and a microprocessor's 

7 nonvolatile memoiy component share a programming charge pump and programming 

8 control; and 
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9 (b) a fixed state custom logic block configured to control access to the nonvolatile 

1 0 memory component. 

1 16, The CAM of claim 1 5 wherein the custom logic block has a fixed algorithm that 

2 cannot be altered by external means. 

1 17. The CAM of claim 1 5 wherein access to a block of the protected nonvolatile 

2 memory component is limited to one or more functions defined in the custom logic block, 

p 1 18. Hie CAM of claim 1 5 whaiein the custom logic block is implemented in solid 

CP 

l li 2 state hardware that implements a simple and well defined state machine. 

y!5 

[Jf 1 19. ITie CAM of claim 15 wteein the protected nonvol^^ 

g 2 not accessible through a system input^output module, system bus, microprocessor, or extemal 

^'s 3 environment 
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1 20. The CAM of claim 1 5 wherein the nonvolatile memory component is exclusively 

2 controlled through the custom logic block md does not require the use of a system bus or 

3 microprocessor. 

1 21. The CAM of claim 1 5 wherein a miaoprocessor's nonvolatile memory 

2 component and the protected nonvolatile memory component use the same physical and logical 

3 address ranges. 

1 22. An article of manufacture for preventing unauthorized access to digital services 

2 comprising: 

3 (a) means for configuring a protected nonvolatile memory component, \^lierein: 

4 (i) the protected nonvolatile memory component is used to contain state 

5 information to provide desired fimctionality and enforce one or more security policies for 

6 accessing tiie digital services; and 
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(n) the protected nonvolatile memory component and a microprocessor' s 
nonvolatile memory component share a programming charge pump and programming 
control; and 

(b) means for controlling access to &e nonvolatile memoiy component through a 
fixed state custom logic block. 

23 . The article of manufecture of claim 22 wherein the custom logic block has a 
fixed algorithm that cannot be altered by external means. 

24. The article of manufacture of claim 22 wherein access to a block of the 
protected nonvolatile memoiy component is limited to one or more functions defined in the 
custom logic block. 

25 . The article of manufacture of claim 22 wherein the custom logic block is 
implemented in solid state hardware that implements a simple and well defined state machine. 

26. The article of manufecture of claim 22 wherein the protected nonvolatile 
memory component is not accessible through a system input^output module, system bus, 
microprocessor, or external environment 

27. The article of manufecture of claim 22 wherein the nonvolatile memory 
component is exclusively controlled Ihrou^ the custom logic block and does not require the use 
of a system bus or microprocessor. 

28. The article of manufacture of claim 22 wherein a microprocessor's nonvolatile 
memory component and the protected nonvolatile memory component use the same physical 
and logical address ranges. 



